Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
File: CJu7CaX772E1wtkgvye7YfXC4J0.mft (raw, json)
Hash identifier: 4p9oaS9thjmKlzu1B+2JiwptatP8KcbUZAIBUwBBGP0=
Subject key identifier: 9D:24:5D:78:FA:FB:94:E1:44:CE:9F:5A:8B:0F:46:B9:1A:99:C5:52
Authority key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
Certificate issuer: /CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Certificate serial: 019FA89A3A1379104389648352136C5885FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 12:01:47 +0000
Manifest this update: Tue 28 Jul 2026 12:01:47 +0000
Manifest next update: Wed 29 Jul 2026 12:01:47 +0000
Files and hashes: 1: CJu7CaX772E1wtkgvye7YfXC4J0.crl (hash: 5WLxKim18TPn1/4sPOVwz+/wFga5EeUhicacCCWQH0w=)
2: OHiJ9XzBUi42gNdFbFSonns_rq0.roa (hash: 5izRR616Szlh4ynpWzSXWkX0E9KgDJBqg2wIQA5yWeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:3a:13:79:10:43:89:64:83:52:13:6c:58:85:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Validity
Not Before: Jul 28 12:01:47 2026 GMT
Not After : Jul 29 12:01:47 2026 GMT
Subject: CN=9d245d78fafb94e144ce9f5a8b0f46b91a99c552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:64:9f:7e:f8:b5:87:5a:9e:90:83:cf:36:8c:
45:7e:79:22:ac:23:ee:46:b1:b1:59:d2:bc:c5:65:
b0:0b:4a:64:d0:da:d4:44:0c:a8:b0:1b:d8:fb:be:
b3:1e:6f:a3:5a:bc:10:d1:56:74:99:2f:64:a3:50:
92:cd:3e:e8:17:ee:90:0d:1b:f9:d9:23:23:cb:9d:
ad:1e:2b:5d:68:34:0f:48:88:1e:ac:9d:b3:1b:fc:
d5:02:10:33:cd:ba:65:fd:57:05:fe:07:f0:e0:0b:
6b:10:57:b6:20:27:49:1e:5a:c6:0a:d0:a9:26:1d:
0c:91:9e:c4:88:4c:53:a2:37:c3:65:da:00:b2:68:
83:1f:5f:18:ce:eb:e1:69:93:25:3a:d2:3b:2e:5c:
57:94:83:62:b8:b6:93:66:35:6a:7a:a6:05:18:96:
37:25:fc:4b:59:35:1d:f0:03:99:ab:19:81:f2:57:
d0:77:73:65:76:94:b3:55:57:46:22:3f:f6:ad:5b:
66:e7:f6:d9:ba:40:79:9b:47:e7:09:62:e3:ee:ca:
51:1b:1c:c5:7d:fa:ae:c0:69:0b:91:05:01:35:4b:
84:71:69:83:92:37:7e:d3:8e:d7:0e:58:49:ba:25:
d4:b5:f6:8a:92:56:4d:f2:65:73:57:70:8c:af:51:
3e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:24:5D:78:FA:FB:94:E1:44:CE:9F:5A:8B:0F:46:B9:1A:99:C5:52
X509v3 Authority Key Identifier:
keyid:08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:81:b9:b4:e7:cf:51:f6:c1:83:08:06:ae:08:14:69:5b:92:
9c:7a:3e:77:26:b6:20:20:e9:5c:c6:5e:48:e4:15:b3:31:23:
74:51:55:16:f0:fb:15:4d:52:42:e2:c4:e3:c2:6e:51:e2:7f:
9d:dc:27:e6:80:7e:5b:ce:bc:f1:ef:68:e1:3a:93:14:90:0e:
6d:97:c8:5b:81:0d:a9:e8:69:d4:80:4d:e1:31:ab:1d:71:18:
eb:9c:15:d0:96:3d:27:5f:b2:44:1b:0d:a7:8d:6e:29:b6:14:
6d:bb:a0:46:7a:b8:c6:02:cb:2d:98:4a:29:8b:66:0d:53:e0:
54:87:60:95:0b:e6:37:a4:cf:7a:cf:47:c8:9e:b9:ef:a1:a8:
51:0d:06:44:86:52:1b:b1:a2:23:0e:db:9a:df:b0:28:32:e5:
b4:49:78:73:63:d6:76:85:e4:91:7c:03:fe:dc:5c:85:cc:66:
6b:0f:24:cb:4a:cf:9a:99:b1:33:5f:0c:a7:86:16:a0:b6:59:
39:58:41:4d:07:5c:b7:61:a4:67:63:9a:57:34:43:59:63:8a:
a0:eb:16:df:8d:39:29:90:d6:f1:55:55:8a:2e:bc:f3:f1:99:
6c:92:a3:33:ff:0b:78:0c:b4:15:6f:20:09:3e:28:25:c3:6b:
9c:d3:e0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:14:28 2026 by rpki-client